2 ms·
This makes no sense. How would it be faster to remediate an issue once it is already in prod? Everything else shows enormous efficiency gains when shifted left.
by UncleMeat 4y ago
This makes no sense. How would it be faster to remediate an issue once it is already in prod? Everything else shows enormous efficiency gains when shifted left.
These numbers also are... ambitious.
Altogether, this just feels like made up data.
- robszumski 4y agoI assume the dev number is higher because the version bump is mixed in with other changes and discovering the CVE in the new version means investigating compatibility with the feature work you just did. Agree that you have to be skeptical about studies like this.